CVE-2017-13192: High severity Google Android vulnerability
In the ihevcdparsesliceheader function of ihevcdparsesliceheader.c a slice address of zero after the first slice could result in an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380202.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13192?
CVE-2017-13192 has a severity rating that suggests it could lead to a remote denial of service, affecting critical system processes.
How do I fix CVE-2017-13192?
To fix CVE-2017-13192, update the affected Android versions to a patched release from Google.
Which Android versions are affected by CVE-2017-13192?
CVE-2017-13192 affects Android versions 5.1.1 through 8.1.
What type of vulnerability is CVE-2017-13192?
CVE-2017-13192 is classified as a denial of service vulnerability due to an infinite loop caused by a zero slice address.
Is user interaction required to exploit CVE-2017-13192?
No, user interaction is not required to exploit CVE-2017-13192.